Port 26257CockroachDB

CockroachDB's default SQL and inter-node RPC port, using PostgreSQL-compatible SQL and typically TLS in secure deployments.

transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 6,483 · top 15%

also known as CockroachDB SQL, CockroachDB RPC, PostgreSQL-compatible SQL

Technical Details

what runs on :26257

CockroachDB uses TCP 26257 by default for both client SQL connections and inter-node communication; the SQL and RPC listeners can be configured separately. SQL clients use the PostgreSQL wire protocol, including its startup and TLS negotiation, while node-to-node traffic uses CockroachDB's RPC protocol over the listener. Secure deployments use TLS; --insecure disables encryption and authentication. The separate HTTP admin UI is usually on port 8080.

Security Information

exposure of :26257

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.8 across 172 ports — this one sits 4.2 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

This port exposes database access and, by default, cluster communication, so an internet-reachable listener can invite credential attacks and expose data or administrative operations. Keep it on private networks, restrict access with firewall rules, and use secure mode with appropriate authentication; insecure mode provides neither TLS nor authentication.

the 8 most looked-up other ports in databases — 172 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted